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A METHOD AND SYSTEM FOR DISTRIBUTING SOFTWARE FEATURES 

TO A COMPUTER 

Field of Invention 

The present invention relates to a method and system for distributing software 
features to a computer. 

Background of the Invention 

Distribution of software features (such as new software products or new 
versions thereof) is a common activity in a data processing system. A typical case is 
that of a network with a great number of workstations, wherein a software 
configuration of each workstation is periodically updated; for example, the software 
products installed on the workstation are upgraded, or the software configuration of 
the workstation is modified to comply with a profile or organisational change. 

Different software distribution applications have been proposed in the last 
years to assist a system administrator in efficiently managing deployment of the new 
software configurations to (client) workstations of the network. A software 
distribution application runs on a server workstation of the network and controls 
building of packages including the software products to be installed and instructions 
understandable by the client workstations. Each package is distributed to the 
respective client workstation through the network; the instructions embedded in the 
package cause the software products to be automatically installed or removed in order 
to reach the desired software configuration of the client workstation. 

Several types of operating systems running on the client workstations allow 
different user profiles to be defined. As a consequence, a user can log onto the 
workstation with a selected profile, and then work in a corresponding desired context. 
The context defines an operating environment specific for the user, for example with 
different software products available, operations to be executed automatically, 
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shortcuts on a desktop, personal configuration parameters, authorisation for using 
system resources or for executing certain operations, and the like. 

The solutions known in the art do not manage the above-described scenario in 
a satisfactory manner. Particularly, no support is provided to the administrator for 
setting specific software configurations for the various users of the workstations. In 
fact, an agent of the software distribution application usually runs in a context of a 
privileged profile, in order to have all the authorisations needed to install or remove 
the software products. However, the configuration information for a specific context 
cannot be modified from a different context for security reasons, not even if the 
different context is associated with the privileged profile. Therefore, the software 
distribution application is unable to define software configurations customised for the 
different users. 

It is an object of the present invention to overcome the above-mentioned 
drawbacks. In order to achieve this object, a method as set out in the first claim is 
proposed. 

Disclosure of the Invention 

Briefly, the present invention provides a method of distributing software 
features to a computer being accessible with a plurality of different user profiles each 
one associated with a corresponding operating context, the method including the steps 
of providing a distribution package including at least one item indicative of an 
activity for enforcing a corresponding software feature on the computer, at least one 
activity being defined as a user activity associated with at least one user profile, 
storing an indication of the at least one user activity on the computer, accessing the 
computer with a current user profile, and retrieving and executing each user activity 
associated with the current user profile in the corresponding operating context. 
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Moreover, the present invention also provides a computer program for 
performing the method, a product storing the program, and a corresponding system 
for distributing software features. 

Brief Description of the Drawings 

Further characteristics and the advantages of the solution according to the 
present invention will be made clear by the following description of a preferred 
embodiment thereof, given purely by way of a non-restrictive indication, with 
reference to the attached figures, wherein: 

Fig.l is a basic block diagram of a networking system in which the method of 
the invention can be used; 

Fig.2 shows a partial content of a working memory of a client workstation 
included in the networking system; 

Figg.3a-3b are a flow chart of a method for managing distribution of software 
features to the client workstation. 

Description of the Preferred Embodiments 

With reference in particular to Fig. 1, there is shown a networking system 100, 
for example a LAN (Local Area Network). The LAN 100 if formed by a plurality of 
workstations 105, typically consisting of PCs (Personal Computers). The 
workstations 105 are connected to one or more concentrators 110 (such as hubs) 
through respective communication cables 115. The networking system 100 has a 
client/server architecture, wherein one or more of the workstations 105 (generally 
consisting of powerful computers) manage network resources, such as shared files 
and devices; the other workstations 105 operate as clients on which users run 
applications relying on server resources. 



GB920000117US1 



4 



Each workstation 105 includes several units, which are connected in parallel 
to a communication bus 120. In particular, a central processing unit (CPU) 125 
controls operation of the workstation 105, a working memory 130 (typically a 
DRAM) is used directly by the CPU 125, and a read-only memory (ROM) 135 stores 
a basic program for starting the workstation 105. Various peripheral units are further 
connected to the bus 120 (by means of respective interfaces). Particularly, a bulk 
memory consists of a hard-disk 140 and of a driver unit (DRV) 145 for reading CD- 
ROMs 150; the workstation 105 further includes an input unit (IN) 155, which 
consists for example of a keyboard and a mouse, and an output unit (OUT) 160, 
which consists for example of a monitor. A network interface card (NIC) 165 is used 
to connect the workstation 105 to the concentrator 1 10 (through the communication 
cable 115). 

Similar considerations apply if the networking system has a different 
topology, if the networking system includes different components (such as one or 
more switches), if the networking system consists of a WAN (Wide Area Network), if 
each workstation has a different structure (for example with a multi-processor 
architecture), and the like. 

Considering now Fig.2, there is shown a partial content of the working 
memory 130 of a client workstation to which software features are distributed from 
another workstation operating as a software distribution server; the information 
(programs and data) is typically stored on the hard-disk and loaded (at least partially) 
into the working memory 130 when the programs are running, together with other 
application programs (not shown in the figure). The programs are initially installed 
onto the hard disk of the client workstation from CD-ROM. 

The working memory 130 includes an operating system (OS) 202 that 
provides basic services defining a software platform for the client workstation, on top 
of which other programs can run. The operating system 202 supports a multi-user 
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environment. More specifically, the client workstation is accessed with a plurality of 
different profiles, each one assigned to a specific user or group of users; a single 
current profile may be enabled at a time. A data structure (CONFIG) 205 inside a 
kernel of the operating system 202 stores respective configuration information for 
each profile. 

A logon module 210 controls an access to the client workstation by each user. 
The logon module 210 authenticates the user, requiring a username and a password to 
be entered. Once the user has been recognised, a session is started with the respective 
profile that causes the client workstation to work in a corresponding operating 
context; the context defines an execution environment specific for the user connected 
to the client workstation (including for example different software products available, 
operations to be executed automatically, shortcuts on a desktop, personal 
configuration parameters, authorisation for using system resources or for executing 
certain operations, and the like). 

A network interface (NET) 215 is used for exchanging information with the 
server workstation through the network. Particularly, the network interface 215 
receives and stores software distribution packages 220. Each package 220 consists of 
a list of items for enforcing corresponding software features on the client workstation. 
Each item has a field ACTION, which defines an activity consisting of one or more 
instructions to be carried out for reaching a desired software configuration; for 
example, the field ACTION specifies that a software product (such as an application 
program) must be installed, that another software product must be removed, that the 
software products must be installed or remove in an undoable manner, that a 
configuration parameter must be updated, that an icon must be created, updated or 
removed from the desktop, and the like. The field ACTION is associated with a flag 
TYPE, which defines the corresponding activity as a global activity for the client 
workstation as a whole or as a (generic) user activity for each single profile. The 
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package 220 further includes one or more files (S W) containing the software products 
to be installed on the client workstation. 

The packages 220 are accessed by a software distribution agent 
(DISTR_AGENT) 225. The distribution agent 225 runs in a (global) environment 
outside any context associated with a user profile; more specifically, it consists of a 
program that runs continuously in the background, until it is activated by the receipt 
of a package from the server workstation. The distribution agent 225 controls a 
repository 230 of software products available on the client workstation. Particularly, 
the distribution agent 225 installs or removes a global portion (GLOBALSW) of 
each software product; the global portion includes code that must be present on the 
client workstation regardless of the user employing the software product. The 
distribution agent 225 further controls a global catalogue (GLOBAL_CAT) 235 
storing information about a status of each software feature on the client workstation 
as a whole; for example, the global catalogue 235 specifies that the global portion of 
each software product has been installed and committed, put in a back-up condition, 
installed in an undoable manner, removed and committed, removed in an undoable 
manner, and so on. 

The working memory 130 further includes a user agent (USER_AGENT) 240; 
the user agent 240 consists of a program performing specific services in the context of 
a corresponding profile. The user agent 240 controls (i.e., installs or removes) a user 
portion (USER_SW) of each software product in the repository 230, which user 
portion is necessary for activating the software product in the corresponding context. 
The user agent 240 further accesses the configuration information 205 and the 
packages 220. Moreover, the user agent 240 controls a specific user catalogue 
(USER_CAT) 245 for each profile; the user catalogue 245 stores information on the 
status of each software feature in the context associated with the respective profile 
(for example the condition of the user portion of each software product in the 
context). The user agent 240 also accesses an authorisation list 250. The authorisation 
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list 250 includes a series of records each one consisting of a field ELE identifying a 
software feature and a field AUTH identifying one or more profiles allowed to have 
this software feature enforced. The authorisation list 250 is controlled by an 
administrator module (ADMIN) 255, which runs in a context associated with a 
privileged profile (typically assigned to a system administrator). 

Similar considerations apply if the programs and data are structured in a 
different manner, if other modules or functions are provided, if the operating system 
supports multiple profiles running simultaneously in time sharing, if different 
software features and corresponding actions are envisaged, if the software features 
may be in different conditions, and the like. 

As shown in Figg.3a-3b, each time the client workstation is switched on 
(either locally or remotely under the control of the server workstation), a method 300 
is performed. The method 300 begins at block 303 and then passes to block 306, 
wherein a bootstrap process is started. The bootstrap involves loading utilities 
providing essential services for the client workstation, which in turn control loading 
and execution of the rest of the operating system. Once the bootstrap has been 
completed, the method forks into two braches that are executed in parallel. A first 
branch consists of blocks 309-324, and a second branch consists of blocks 327-369; 
the two branches joint at the final block 372. 

Considering now block 309, the distribution agent is loaded. The distribution 
agent verifies at block 312 whether a new package has been received from the server 
workstation. If not, the method returns to block 309 in an idle loop. Conversely, the 
package is stored onto the working memory of the client workstation at block 315. 
Considering now block 318, the distribution agent executes all the instructions in the 
respective field ACTION of the items defined as global activities by the 
corresponding flag TYPE. In this way, only the global activities are executed at a 
distribution time; on the other hand, the user activities are scheduled to be executed 
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only when a user logs onto the workstation with the corresponding profile (as 
described in detail in the following). The status information for the software features 
involved is accordingly updated in the global catalogue at block 321 . The distribution 
agent then checks at block 324 whether the client workstation has been shut down. If 
not, the method returns to block 309 (for repeating the steps described above); on the 
contrary, the method ends at the final block 372. 

At the same time, the method loops at block 327 waiting for a user command. 
If the client workstation has been shut down, the method ends at the final block 372. 
If a user has requested an access to the client workstation, the method passes to block 
328, wherein a logon process is started. Particularly, the user is prompted to enter its 
username and password; once the user has been authenticated, the configuration 
information for the context associated with the selected profile is retrieved in order to 
set up the desired execution environment as the logon progresses. 

Descending into block 330, the user agent is loaded in the context of the 
current profile. The user agent retrieves the status information for a first software 
feature from the global catalogue at block 333. A check is made at block 336 whether 
the current profile is allowed to have this software feature enforced (according to the 
content of the corresponding record in the authorisation list). If not, the method 
descends into block 339 (described in the following). Conversely, the method 
continues to block 342, wherein the status information for the same software feature 
in the context associated with the current profile is extracted from the user catalogue. 

The status information from the global catalogue and the status information 
from the user catalogue are compared at block 348. If no action is required the 
method passes to block 339 directly; for example, this is the case when the software 
feature results in the same status in the global catalogue and in the user catalogue 
since the software feature has been already enforced in the context of the current 
profile, or when the global portion of a software product is not in a final status (such 
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as in a back-up condition). On the contrary, the method enters block 351. The 
instructions needed for aligning the software feature in the context associated with the 
current profile to the status set out in the global catalogue are retrieved from the 
stored packages; the corresponding activity is then carried out under the control of the 
user agent. The status information for the software feature involved is accordingly 
updated in the user catalogue at block 354, and the method descends into block 339. 
Considering now block 339, the user agent verifies whether a last software feature in 
the global catalogue has been reached. If not, the method returns to block 333 for 
processing a next software feature. 

Conversely, the method passes to block 357, wherein the execution of the user 
agent is terminated and the other operations of the logon process are completed. 
Operation of the client workstation is now under the control of the user, which can 
run all the desired applications available in the context associated with the current 
profile. The method then proceeds to the decisional block 360. If the client 
workstation has been accessed with the privileged profile and the system 
administrator has chosen to edit the authorisation list, the selected operations (such as 
insert, delete or update records) are carried out at block 366; the method then 
descends into block 369. Conversely, the method passes to block 369 directly. 

Considering now block 369, a check is made whether the user has entered a 
logoff command. If not, the method returns to block 357 (for processing further 
requests from the user). On the contrary, if the user has closed the current session the 
method returns to block 327 (waiting for a new logon or the shut down of the client 
workstation). 

Likewise considerations apply if an equivalent method is performed, for 
example if the logon is carried out with a different procedure, if another memory 
structure is provided for storing an indication of the user activities included in the 
package and to be executed later on under the control of the user agent, if the user 
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activities are retrieved and executed in the context associated with the current profile 
in a different manner, and so on. 

More generally, the present invention provides a method of distributing 
software features to a computer being accessible with a plurality of different user 
profiles each one associated with a corresponding operating context. The method 
includes the steps of providing a distribution package with one or more items 
indicative of an activity for enforcing a corresponding software feature on the 
computer; some of the activities are defined as user activities associated with one or 
more user profiles. An indication of each user activity is stored on the computer. The 
computer is accessed with a current user profile; each user activity associated with the 
current user profile is then retrieved and executed in the corresponding operating 
context. 

The proposed solution allows specific software configurations to be deployed 
for the various profiles of the workstations. For example, some software products 
may be enabled only for certain users accessing the client workstation with selected 
profiles; moreover, customised configuration information (such as different 
operations to be executed automatically or shortcuts on a desktop) may be set for each 
profile. As a consequence, the method of the invention provides a very flexible 
solution for managing the software configurations of the client workstations in the 
network. 

In addition, the various software features are enforced in each context only 
when they are actually needed. In fact, in the method described above the user 
activities are retrieved and executed when the client workstation is accessed with the 
respective profile. Therefore, if a user does not log onto the client workstation, his or 
her profile is never updated. 
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The preferred embodiment of the invention described above offers further 
advantages. For example, the distribution agent (running outside the context 
associated with the current profile) allows the global activities to be executed 
irrespective of the user actually working with the client workstation. The user agent 
running in the context associated with the current profile makes it possible to execute 
the respective user activities without any security concern; moreover, the user 
activities are carried out during the logon process, so that the corresponding software 
features are automatically enforced each time the user logs onto the client 
workstation. In an advantageous embodiment of the present invention, the distribution 
agent runs with the client workstation in a logoff condition. In this way, the global 
activities may be executed even if no user is currently logged on the client 
workstation at the distribution time. 

Similar considerations apply if the distribution agent and the user agent 
perform equivalent routines, if the user agent is loaded after completion of the logon 
process, if the global activities and/or the user activities are not carried out 
automatically (for example if the user is prompted to accept the software features 
before they are enforced in the corresponding context), and the like. Alternatively, the 
user agent is kept active for the whole current session; every time a new package is 
received and the global activities have been executed, the distribution agent notifies 
the user agent accordingly, so that the corresponding software features are enforced in 
the context associated with the current profile immediately. However, the solution 
according to the present invention leads itself to be implemented even with other 
modules, or without the possibility of running the distribution agent when the client 
workstation is in the logoff condition (for example requiring the administrator to be 
logged on for carrying out the global activities in the privileged context). 

Advantageously, the method of the invention is used for deploying software 
products having a global portion and a user portion necessary for activating the 
software product in each context. In this way, the software products installed on the 
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client workstation may be made visible only to the desired users. In a preferred 
embodiment of the invention, each activity is defined as a global activity or a generic 
user activity (without specifying any profile). In this way, a simple flag is required in 
each item of the package. Moreover, the user activities are executed in each context 
according to a comparison between the global catalogue and the respective user 
catalogue; this ensures (in a simple and effective manner) that all the instructions 
included in the package are executed only once. The authorisation list further 
provides the possibility of identifying the profiles allowed to have each software 
feature enforced, so that the software products available to each user are configurable 
in a simple manner. 

Likewise considerations apply if the global and user activities are defined 
differently, for example associating a single flag to a container including two or more 
items of the package, if the global catalogue and the user catalogue are replaced by 
equivalent memory structures, if the status information for each software feature in 
the global catalogue and in the user catalogue are compared in a different manner, if a 
simple flag is stored for indicating the completion of a generic user activity in each 
context (in order to avoid its repetition later on in the same context), and so on. 
Alternatively, the software features consist of a single portion to be installed in each 
desired context, each item of the package includes a field for associating the 
corresponding user activity with one or more profiles, the authorisation list only 
specifies the profiles allowed to have all the software products available (without the 
possibility of selecting specific software features for different profiles), the user agent 
is loaded only for desired profiles allowed to have the software products available, or 
all the software features are always enforced in every context (as soon as the client 
workstation is accessed with the respective profile). 

In a preferred embodiment of the present invention, the method is employed 
in a software distribution application for a network, wherein the software features are 
automatically deployed from the server workstation to the client workstations. 
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Advantageously, the method proposed by the present invention is implemented with a 
computer program, which is provided on CD-ROM. 

ar e compared in a diff e rent mann e r, if a simpl e flag is stor e d for indicating the 
5 compl e tion of a g e n e ric us e r activity in each cont e xt (in ord e r to avoid its r e petition 

later on in the sam e context), and so on. Alt e rnatively, th e software f e atures consist of 
a singl e portion to be install e d in each d e sir e d context, each item of the package 
includ e s a field for associating the corr e sponding user activity with one or more 
profiles, th e authorisation list only sp e cifi e s the profil e s allow e d to hav e all the 
10 software products available (without the possibility of s e lecting sp e cific software 

featur e s for diff e r e nt profiles), th e user ag e nt is loaded only for desir e d profiles 
allow e d to hav e th e software products availabl e , or all th e software f e atures are 
always e nforc e d in every cont e xt (as soon as the cli e nt workstation is acc es sed with 
the r e spectiv e profil e ). 

15 

In a pr e f e rred e mbodim e nt of th e pres e nt inv e ntion, the method is e mployed 
in a software distribution application for a network, wherein the software features are 
automatically d e ploy e d from th e s e rver workstation to th e client workstations. 
Advantageously, the method propos e d by th e pres e nt inv e ntion is implem e nt e d with a 
20 computer program, which i s provided on CD ROM. 

Alternatively, the program is provided on floppy-disk, is pre-loaded onto the 
hard-disk, or is stored on any other computer readable medium, is sent to the client 
workstation through the network, is broadcast, or more generally is provided in any 
25 other form directly loadable into a working memory of a computer. However, the 

method according to the present invention leads itself to be used in any data 
processing system having one or more computers (even if the computers are not 
connected to each other in a network and the packages are copied onto CD-ROMs 
that are manually distributed), or to be carried out with a hardware structure installed 
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on the client workstation (for example integrated in a chip of semiconductor 
material). 

Naturally, in order to satisfy local and specific requirements, a person skilled 
5 in the art may apply to the solution described above many modifications and 

alterations all of which, however, are included within the scope of protection of the 
invention as defined by the following claims. 



